IT Security Manager -- BISO Team Lead (United States)

Job Description

About FIS

Are you curious, motivated, and forward-thinking? At FIS, you will have the opportunity to work on some of the most challenging and relevant issues in financial services and technology. Our talented people empower us, and we believe in being part of a team that is open, collaborative, entrepreneurial, passionate and above all fun.

About the Team

This team is led by an IT Security Executive supporting the Chief Information Security Officer (CISO). The focus of this team is cybersecurity governance, policy and risk management.

About the role

You will play the role of the United States (US) lead for the Business Information Security Officer (BISO) team.  You will be a key point-of-contact for specific Lines of Businesses (LoBs), and work closely with the BISO leads from Latin America (LATAM) and Asia Pacific (APAC) as well as technical teams (IT, security, tech dev, network, cloud), business leaders and other relevant stakeholders.  You will also work closely with the cyber governance and risk management team to effectively identify, communicate, and manage security risk at FIS.

What you will be doing

• Serving as the primary cyber security expert for US-focused LoBs, creating awareness on FIS security policies and requirements and sector hot topics, and being an overall security advisor to the business.

• Building relationships with the LoBs, leading monthly touchpoints, and working with the LoBs to drive risk remediation across security focus areas.

• Co-leading a centralized policy exception team, bringing strong technical knowledge across network, cloud, infrastructure, applications etc. to analyze, triage and conclude on risks related to exceptions.  Overseeing evaluation of risk action plans and driving risk decisions balancing security risk to FIS while enabling the business.

• Working with key stakeholders to drive LoB compliance with internal security policies and assisting with US and global regulatory frameworks, including CCPA, GDPR, PCI-DSS, and other relevant standards.

• Conducting cyber risk assessments of business-led initiatives, products or technology development, and providing recommendations for remediating risk.

• Communicating security policy, standards and requirements changes and impacts to the LoBs and relevant stakeholders and facilitating effective change management.

• Working closely with the Cybersecurity team to ensure that LoB information security strategies complement cyber risk management practices.

• Partnering with IT, Legal, Compliance, Risk and other teams to implement comprehensive security solutions, ensuring effective protection and alignment with business priorities. Evaluating projects and contracts for alignment with security requirements.

• Acting as the security SME for clients, particularly in the financial sector, and helping them understand FIS’ security capabilities and how FIS protects client data.

What you bring

• Bachelor’s degree in information security or related field.

• 7-10 years in information security, with 3-5 years in a stakeholder engagement role.

• Knowledge of security technologies (encryption, data protection, secure configuration, privilege access, etc.)

• Experience in IT infrastructure, Cloud and emerging technologies.

• Knowledge of networks technologies (protocols, design concepts, access control, engineering).

• Proactive in building and fostering relationships across all levels of the organization, including executives.

• Strong business acumen, leadership, risk management and communication skills.

• Strong decision-making and problem-solving skills. Demonstrated experience in handling complex situations and the delicate balance between security and business enablement.

• Comfortable handling multiple priorities, establishing goals, and implementing protocols for LoB and key stakeholder engagement in a fast-paced environment.

• Excellent verbal and written communication skills to technical and non-technical audiences of various levels in the organization.

• Strategic mindset to understand the cyber risk trends and plan with stakeholders to remediate the root cause.

• CISSP, CISM, CISA, or equivalent preferred.

• Strong knowledge of financial regulations and industry standards. Experience in the financial sector is desirable.

Bonus if you have

ServiceNow and Archer platform experience.

What we offer you

• Flexible and creative work environment.

• Diverse and collaborative atmosphere.